2026 CVE Vulnerabilities
43,274 CVEs published in 2026.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-24083 | HIGH | 7.8 | 0.1% | Aug 4, 2026 | Memory Corruption while processing IOCTL device driver requests with invalid arguments. |
| CVE-2026-24080 | HIGH | 7.8 | 0.1% | Aug 4, 2026 | Memory Corruption when handling malformed request parameters in the fingerprint TA. |
| CVE-2026-24079 | HIGH | 8.1 | 0.2% | Aug 4, 2026 | Cryptographic Issue while processing registration requests with malformed or missing authentication parameters. |
| CVE-2026-21366 | HIGH | 7.8 | 0.1% | Aug 4, 2026 | Memory corruption while processing a packet with a size close to the maximum allowed value. |
| CVE-2026-69250 | HIGH | 8.5 | — | Aug 4, 2026 | Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3.1.3, the OAuth2 toke... |
| CVE-2026-68494 | HIGH | 8.7 | — | Aug 4, 2026 | The fix released in jackson-core 2.18.6 and 2.21.1 for CVE-2026-18401 (GHSA-72hv-8253-57qq, number length constraint byp... |
| CVE-2026-67200 | HIGH | 8.7 | — | Aug 4, 2026 | Perspective 5.0.0 contains a path traversal vulnerability that allows unauthenticated remote attackers to read arbitrary... |
| CVE-2026-67199 | HIGH | 7.1 | — | Aug 4, 2026 | Perspective 5.0.0 contains a denial of service vulnerability that allows remote attackers to block the server event loop... |
| CVE-2026-67198 | HIGH | 8.7 | — | Aug 4, 2026 | Perspective 5.0.0 contains a denial-of-service vulnerability in the VirtualServer protocol dispatcher that allows unauth... |
| CVE-2026-67195 | HIGH | 8.8 | — | Aug 4, 2026 | Perspective 5.0.0 contains a remote code execution vulnerability that allows unauthenticated attackers to execute arbitr... |
| CVE-2026-18770 | HIGH | 7.3 | 0.3% | Aug 4, 2026 | A vulnerability has been found in vibesurf-ai VibeSurf up to cd6e519d507cdd4d63061300bf60fb176e1f57e0. Impacted is an un... |
| CVE-2026-18650 | HIGH | 8.8 | — | Aug 4, 2026 | Missing Authorization vulnerability in HAVELSAN Inc. Liman MYS allows Privilege Escalation. This issue affects Liman MY... |
| CVE-2026-17070 | HIGH | 8.8 | — | Aug 4, 2026 | Missing Authorization vulnerability in HAVELSAN Inc. Liman MYS allows Accessing Functionality Not Properly Constrained b... |
| CVE-2026-70373 | HIGH | 8.8 | 0.3% | Aug 4, 2026 | Koha's reports/issues_stats.pl (the circulation statistics report) builds its calculation query in sub calculate by conc... |
| CVE-2026-70372 | HIGH | 8.8 | 0.3% | Aug 4, 2026 | Koha's reports/bor_issues_top.pl builds dynamic SQL in sub calculate by concatenating several user-controlled request pa... |
| CVE-2026-70371 | HIGH | 8.8 | 0.3% | Aug 4, 2026 | Koha's reports/issues_avg_stats.pl builds dynamic SQL in sub calculate by concatenating several user-controlled request ... |
| CVE-2026-70370 | HIGH | 8.8 | 0.3% | Aug 4, 2026 | Koha's reports/catalogue_stats.pl builds dynamic SQL in sub calculate by interpolating the user-controlled Line and Colu... |
| CVE-2026-70369 | HIGH | 8.8 | 0.3% | Aug 4, 2026 | Koha's reports/acquisitions_stats.pl builds its per-cell statistics query in sub calculate by interpolating the user-con... |
| CVE-2026-63252 | HIGH | 7.5 | 0.4% | Aug 4, 2026 | In Eclipse Milo versions 0.6.0 through 1.1.4, UASC server transport handlers fail to release retained partial message ch... |
| CVE-2026-62927 | HIGH | 7.5 | 0.4% | Aug 4, 2026 | In Eclipse Milo versions 1.0.0 through 1.1.4, the Call service dispatches the original mixed batch to address-space hand... |
| CVE-2026-61387 | HIGH | 7.5 | 0.3% | Aug 4, 2026 | In Eclipse Milo versions 1.0.0 through 1.1.4, monitored-item quota accounting is not exception-safe: if item creation fa... |
| CVE-2026-60007 | HIGH | 7.4 | 0.5% | Aug 4, 2026 | In Eclipse Milo versions 0.6.0 through 1.1.4, username-token processing returns distinguishable errors for invalid RSA P... |
| CVE-2026-58080 | HIGH | 8.2 | 0.4% | Aug 4, 2026 | In Eclipse Milo versions 1.0.0 through 1.1.4, `OpcUaServerConfig.copy()` fails to preserve a configured `RoleMapper`. On... |
| CVE-2026-18806 | HIGH | 7.1 | 0.1% | Aug 4, 2026 | External control of file name or path vulnerability in TÜBİTAK BİLGEM Software Technologies Research Institute pardus-im... |
| CVE-2026-10710 | HIGH | 7.8 | — | Aug 4, 2026 | A maliciously crafted FBX file, when parsed through Autodesk FBX SDK, can trigger a stack-based buffer overflow vulnerab... |
Check if your code is affected by 2026 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now